service.jwt.private_cert_path

Purpose

Private signing key file path for asymmetric algorithms. Default: Not declared.

Example

[aam]
service.jwt.private_cert_path = "/private/keys/aam.key"

This sets service.jwt.private_cert_path for AAM on the next request. Use this with an asymmetric signing algorithm and a matching public certificate. Keep the key outside the public web root.

See the ConfigPress reference for configuration precedence and the complete key list.